157 matches found
CVE-2026-114196
Deserialization of Untrusted Data vulnerability in paytiumsupport Paytium paytium allows Object Injection.This issue affects Paytium: from n/a through 5.0.5...
EUVD-2026-109258
Deserialization of Untrusted Data vulnerability in paytiumsupport Paytium paytium allows Object Injection.This issue affects Paytium: from n/a through 5.0.5...
CVE-2026-114196 WordPress Paytium plugin <= 5.0.5 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in paytiumsupport Paytium paytium allows Object Injection.This issue affects Paytium: from n/a through 5.0.5...
CVE-2026-114196
The Paytium WordPress plugin (specifically the paytiumsupport component) is vulnerable to Object Injection due to the deserialization of untrusted data (CWE-502). This issue affects versions from n/a through 5.0.5 . Successful exploitation could lead to significant impacts on confidentiality, int...
PT-2026-122525
Name of the Vulnerable Software and Affected Versions Paytium versions prior to 5.0.6 Description Paytium allows Object Injection due to the deserialization of untrusted data. This occurs when the application processes specially crafted input, allowing an attacker to inject arbitrary PHP objects...
WordPress Paytium plugin <= 5.0.5 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Tarcísio LuchesiPoystick in WordPress Plugin Paytium versions = 5.0.5...
CVE-2026-18467
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.0.3. The 5.0.3 patch introduced a wphash/hashequals signature gate on the pt-paytium-user-data field, but left a second filter — ptcfcheckoutmeta,...
EUVD-2026-85777
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.0.3. The 5.0.3 patch introduced a wphash/hashequals signature gate on the pt-paytium-user-data field, but left a second filter — ptcfcheckoutmeta,...
CVE-2026-18467 Paytium: Mollie payment forms & donations <= 5.0.3 - Unauthenticated Privilege Escalation via 'pt_form_field[pt-user-role]' Parameter
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.0.3. The 5.0.3 patch introduced a wphash/hashequals signature gate on the pt-paytium-user-data field, but left a second filter — ptcfcheckoutmeta,...
CVE-2026-18467
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to Unauthenticated Privilege Escalation in versions up to and including 5.0.3 . The root cause is a logic flaw where the pt_cf_checkout_meta() filter copies $_POST['pt_form_field'][*] keys into the payment meta array...
CVE-2026-18467 Paytium: Mollie payment forms & donations <= 5.0.3 - Unauthenticated Privilege Escalation via 'pt_form_field[pt-user-role]' Parameter
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.0.3. The 5.0.3 patch introduced a wphash/hashequals signature gate on the pt-paytium-user-data field, but left a second filter — ptcfcheckoutmeta,...
PT-2026-97646
Name of the Vulnerable Software and Affected Versions Paytium: Mollie payment forms & donations plugin for WordPress versions prior to 5.0.4 Description A privilege escalation issue exists where unauthenticated attackers can register a new WordPress account with administrator privileges. The flaw...
CVE-2026-18467: Improper Privilege Management
The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.0.3. The 5.0.3 patch introduced a wphash/hashequals signature gate on the pt-paytium-user-data field, but left a second filter — ptcfcheckoutmeta,...
WordPress Paytium: Mollie payment forms & donations plugin <= 5.0.3 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by Aydan Arabadzha in WordPress Plugin Paytium versions = 5.0.3...
CVE-2026-56030
Unauthenticated Privilege Escalation in Paytium = 5.0.2 versions...
CVE-2026-56030
CVE-2026-56030 affects WordPress Paytium plugin (versions
EUVD-2026-39693
Unauthenticated Privilege Escalation in Paytium = 5.0.2 versions...
CVE-2026-56030 WordPress Paytium plugin <= 5.0.2 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in Paytium = 5.0.2 versions...